SNAGSNAP — THIRD-PARTY NOTICES ============================== Product: SnagSnap 7.4 Owner of SnagSnap: Big L Riz Media Group Limited (company number 12408198) This file records third-party software included in, distributed with, or required by SnagSnap. Keep it up to date as dependencies are added, removed or updated. The SnagSnap proprietary licence (LICENSE) does not replace or override any third-party component's licence. Each component below stays under its own licence. Full licence texts are in public/legal/licences/ and are shown in the app under Help > About > Licences (/legal/). Review date for every entry below: 1 November 2026. Reviewer: prepared by Claude (AI assistant) for Larrell Archibald. Needs a human check and sign-off before relying on it. PART A. SOFTWARE BUNDLED WITH THE APP (sent to users' browsers) --------------------------------------------------------------- 1. jsPDF - Version: 2.5.1 - Copyright holder: (c) 2010-2021 James Hall; (c) 2015-2021 yWorks GmbH; and the bundled components listed in its licence file - Licence: MIT (with bundled MIT/BSD-style components named in the file) - Source: https://github.com/parallax/jsPDF - Used for: making PDF reports, site instructions and QR label sheets - File: public/lib/jspdf.umd.min.js - Notice required: keep copyright and licence text (public/legal/licences/jspdf-LICENSE.txt) - Modifications: none (published minified build) 2. PDF.js (pdfjs-dist) - Version: 3.11.174 - Copyright holder: Mozilla Foundation - Licence: Apache License 2.0 - Source: https://github.com/mozilla/pdf.js - Used for: opening PDF drawings and plans - Files: public/lib/pdf.min.js, public/lib/pdf.worker.min.js - Notice required: keep licence text and notices (public/legal/licences/pdfjs-LICENSE.txt) - Modifications: none (published minified build) 3. Leaflet - Version: 1.9.4 - Copyright holder: (c) 2010-2023 Volodymyr Agafonkin; (c) 2010-2011 CloudMade - Licence: BSD 2-Clause - Source: https://github.com/Leaflet/Leaflet - Used for: the photo map - Files: public/lib/leaflet.js, public/lib/leaflet.css, public/lib/images/* - Notice required: keep copyright and licence text (public/legal/licences/leaflet-LICENSE.txt) - Modifications: none 4. docx - Version: 9.15.1 - Copyright holder: (c) 2016 Dolan Miu - Licence: MIT - Source: https://github.com/dolanmiu/docx - Used for: Word (.docx) reports, summaries and site instructions - File: public/lib/docx.min.js - Notice required: keep copyright and licence text (public/legal/licences/docx-LICENSE.txt) - Modifications: none (published browser build, minified) 5. SheetJS Community Edition (xlsx) - Version: 0.18.5 - Copyright holder: (c) SheetJS LLC - Licence: Apache License 2.0 - Source: https://github.com/SheetJS/sheetjs - Used for: reading and writing Excel files (import and export) - File: public/lib/xlsx.full.min.js - Notice required: keep licence text and notices (public/legal/licences/sheetjs-xlsx-LICENSE.txt) - Modifications: none - Note: 0.18.5 is the last SheetJS release on npm. Newer releases are published on the SheetJS CDN. Check for security fixes at the next upgrade. 6. QR Code Generator for JavaScript (qrcode-generator) - Version: 1.4.4 - Copyright holder: (c) 2009 Kazuhiko Arase - Licence: MIT - Source: https://github.com/kazuhikoarase/qrcode-generator - Used for: QR labels for rooms and equipment - File: public/lib/qrcode.min.js - Notice required: keep copyright and licence text (public/legal/licences/qrcode-generator-LICENSE.txt). "QR Code" is a registered trademark of DENSO WAVE INCORPORATED. - Modifications: minified only 7. three.js - Version: 0.180.0 - Copyright holder: (c) 2010-2025 three.js authors - Licence: MIT - Source: https://github.com/mrdoob/three.js - Used for: drawing the 3D model in the BIM preview (including OrbitControls) - File: bundled into public/lib/bim/bim-viewer.js - Notice required: keep copyright and licence text (public/legal/licences/three-LICENSE.txt and public/lib/bim/THREE-LICENSE.txt) - Modifications: none to three.js itself; bundled and minified with esbuild 8. web-ifc - Version: 0.0.78 - Copyright holder: That Open Company and web-ifc contributors - Licence: Mozilla Public License 2.0 (MPL-2.0) - Source: https://github.com/ThatOpen/engine_web-ifc - Used for: reading IFC models in the BIM preview - Files: public/lib/bim/web-ifc.wasm, and its JavaScript bundled into public/lib/bim/bim-viewer.js - Notice required: keep licence text (public/legal/licences/web-ifc-LICENSE.txt and public/lib/bim/WEB-IFC-LICENSE.md) - Modifications: none - Obligations: MPL-2.0 is file-level copyleft. If web-ifc's own files are ever changed, the changed files must be made available under MPL-2.0. SnagSnap's own files are not affected. Recipients must be told where to get web-ifc's source (the URL above). - Approval: MPL-2.0 is a reciprocal licence. Per the IP and Licensing Policy section 3, record written approval before commercial release. 9b. Lucide icons (lucide-static) - Version: 1.66.0 - Copyright holder: (c) 2026 Lucide Icons and Contributors; some icons derived from Feather (c) 2013-present Cole Bemis - Licence: ISC (Feather-derived icons: MIT) - Source: https://github.com/lucide-icons/lucide - Used for: the icons throughout the app (SVG paths copied into public/app.js) - Notice required: keep copyright and licence text (public/legal/licences/lucide-LICENSE.txt) - Modifications: none to the drawings; stroke width set by SnagSnap's styles Build tool only (not shipped to users): esbuild 0.25 (MIT), used to bundle items 7 and 8. PART B. TOOLS USED TO RUN OR PUBLISH SNAGSNAP (not shipped inside the app) -------------------------------------------------------------------------- 9. Wrangler (Cloudflare command line tool) - Version: 4.x (4.156.0 checked) - Licence: MIT OR Apache-2.0 - Source: https://github.com/cloudflare/workers-sdk - Used for: local testing and publishing to Cloudflare (devDependency). Its own dependencies are installed by npm and are not part of the app. 10. Node.js — needed on the computer that runs setup. Installed separately by the user from https://nodejs.org (MIT and other licences). PART C. ONLINE SERVICES AND DATA (used at run time, not distributed) -------------------------------------------------------------------- 11. Cloudflare Pages, D1, R2 and Workers — hosting, database and file storage, under the account holder's own Cloudflare terms. 12. Cloudflare Workers AI models, used for transcription, summaries and photo descriptions. Each model has its own licence or terms of use: - @cf/openai/whisper-large-v3-turbo (transcription) - @cf/mistralai/mistral-small-3.1-24b-instruct (summaries, photo descriptions) - @cf/google/gemma-3-12b-it and @cf/google/gemma-4-26b-a4b-it (Gemma Terms of Use) - @cf/meta/llama-3.1-8b-instruct and @cf/meta/llama-3.3-70b-instruct-fp8-fast (Llama Community Licence; text only, no vision use) Check each model's terms on Cloudflare's model pages before commercial use. 13. Map tiles (shown with on-map attribution): - OpenStreetMap: (c) OpenStreetMap contributors, data under ODbL - OpenTopoMap: CC-BY-SA, with SRTM elevation data - Esri World Imagery: (c) Esri, Maxar, Earthstar Geographics, under Esri terms Note: the public OpenStreetMap tile servers have a usage policy that does not allow heavy or commercial use. A paid or self-hosted tile service will be needed before SnagSnap is sold to customers. 14. Open-Meteo weather data, used by Fill in the site diary. Licence: CC BY 4.0. Attribution "Weather data by Open-Meteo.com" is shown next to the field. The free Open-Meteo API is for non-commercial use; a commercial plan is needed before customer use. 15. Resend (optional email alerts), under the account holder's own Resend terms. 16. Website fonts loaded from Google Fonts (not bundled): Barlow, Barlow Condensed and JetBrains Mono, all under the SIL Open Font License 1.1. LICENCE REVIEW CHECKLIST ------------------------ [x] Identify direct dependencies (Part A, B and C above). [x] Confirm the exact version and licence for each bundled dependency. [ ] Identify transitive dependencies inside each minified bundle. jsPDF lists its bundled components in its licence file; others to be checked at the next upgrade. [x] Review licence compatibility with a proprietary commercial application. All bundled items are permissive (MIT, BSD-2, Apache-2.0) apart from web-ifc (MPL-2.0, file-level copyleft, acceptable if unmodified). [x] Preserve required copyright notices and attribution. [x] Include required licence texts (public/legal/licences/). [ ] Written approval recorded for web-ifc (MPL-2.0). [ ] Before commercial launch: move off the free OpenStreetMap tiles and the free Open-Meteo API, and confirm the Workers AI model terms. [x] Record the review (this file, 1 November 2026). No GPL or AGPL components are included. This register is a working compliance document. It is not a substitute for reviewing the actual licence terms of each dependency.